https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T01:58:58.255865+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125098 CVE-2026-125098 — FFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH Chunk 2026-11-11T01:58:58.256993+00:00

Affected: FFmpeg

FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_alpha() in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width * height to disclose stale pixel data from previously decoded frames.